Benny Blanco

Untappd:bblanco82

BTC: bc1qf6c824586qqnzfg9nrzgaxyr7ax32tweyfnr5m

[BleepingComputer @BleepinComputer]

Chinese hackers hijack auth flow, spy on isolated network for a decade
https://t.co/vn2uG9P7f2

https://t.co/vn2uG9P7f2

[Panos Gkatziroulis 🦄 @ipurple]

Sliver into WebAssembly - Inside WasmForge https://t.co/gJx2absQLH

[Georgy Kucherin @kucher1n]

Together with @bzvr_, @2igosha and Anton Kargin, we identified that the DAEMON Tools software has been compromised in a complex supply chain attack since April 8. We see thousands of infections across 100+ countries. If you use DAEMON Tools, run a malware scan immediately! [1/7]

[Wiz @wiz_io]

The secret's out.🤫

Introducing THE https://t.co/iULfuMrtEd COMMUNITY 👾

Inside:
• 0-day vuln deep dives from @xint_official, @stdoutput, @pspaul95 & more...
• Access to events & a network of world-class hackers
• CTFs with prizes

Join now :)

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovered Remote Code Execution on https://t.co/SvN2lGsnbO with a single git push

The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

[Rasta Mouse @_RastaMouse]

Atomic BOFs
https://t.co/VRDxY5InwN

[Benny Blanco @BenAllAround]

@ksg93rd Looks promising, when will it be made public?

[Mayfly @M4yFly]

🔥🐉 New GOAD Lab: DRACARYS

I’ve just released a new free lab environment on GOAD: DRACARYS.
The challenge includes 3 VMs and the objective is simple:
Start with no authentication and work your way up to Domain Admin.

Have fun exploiting it! 🔥🐉

https://t.co/TkbVEIxyyX

[Benny Blanco @BenAllAround]

@Jhaddix How dare you earn a living. Clearly no one else shares their opinion. Ill never forget meeting you at Defcon 22, and you gave me a copy and course materials; I thought Holy cow thats amazing!

[0xMarioNawfal @RoundtableSpace]

OpenClaw can now scrape any website without getting blocked - zero bot detection, bypasses Cloudflare natively, 774x faster than BeautifulSoup.

No selector maintenance. No workarounds. Just data.

THIS IS AN UNFAIR ADVANTAGE AND IT'S FULLY OPEN SOURCE.

[Denis @unmaskparasites]

ClickFix abusing Google's https://t.co/vESL5VBQlg and CloudFlare’s https://t.co/w5pm35I6JV.
Inj: storage.googleapis[.]com/tagmanager/gtag-analytics.js
Iframe: check.web-db.workers[.]dev
Payload: storage.googleapis[.]com/python-3/python.update
VT: https://t.co/VE6kBpCMuQ

[v1n @0xv1nx0]

Dropping new LOLBin/LOLBAS inspired project today called LOLGlobs, to document some cool ways of commandline evasion using wildcards and some other obfuscation techniques that go beyond B64 encoding: https://t.co/weesvN45Vd

[Night Sky Now @NightSkyNow]

Full rotation of the Moon as seen by NASA's Lunar Reconnaissance Orbiter.

[Sami Laiho @samilaiho]

Hackers target Microsoft Entra accounts in device code vishing attacks
https://t.co/XytFgTzES5

[André Baptista @0xacb]

ASN/CIDR lookups are massively underrated for recon.

Start with a company name. Find all their assets. Get instant ASN to CIDR lookups, IP/DNS/ORG resolution, and JSON/CSV output 👇

https://t.co/IisZfi1WY3

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Incident Response Documentation: Visualizes incident response timelines and lateral movement

- https://t.co/hAAElqP1sG

#infosec #cyberses #IncidentResponse

[Thomas Naunheim @Thomas_Live]

[New blog post] Analyzing #MicrosoftEntra 🤖 Workload Identity Activity Through 🪙 Token-Based Hunting
I’ve published a #KQL function to hunt activities by tokens from non-human identities and share some experimental queries and insights in this article.
https://t.co/XbW0rQ7ekR

[Jimmy Page @JimmyPage]

Happy birthday JP 🎂🎈

[Curiosity @CuriosityonX]

It took 9 years and 3 billion miles to get this shot.

Pluto’s icy Mountains.

[Benny Blanco @BenAllAround]

@TimLovegrove @chrissanders88 An even greater analyst will say, what happened to the security architect